Last updated: September 19, 2026.
OpenScreenTime is a free, open-source screen-time app for families: a parent app and a kid app (Android), plus a parent app for iPhone that is built but not yet released. It is meant to support a conversation about healthy screen time, not to watch someone in secret. This policy explains what it collects, where that goes, and how to have it deleted.
Who runs this service: Justin Scoville, the person who operates the Firebase project this build connects to. Contact: trumpetmadnesshq@gmail.com.
On a child's phone (kid app)
- Which app is in front, and for how long, per app, per day (app name and package name).
- The list of apps installed on the phone (each app's name and package name, nothing about how it's used or what's in it). It is sent to the parent's account so a parent can set a limit on any app, not only ones already used. It is refreshed when the list changes, and at least weekly.
- How many times the phone was unlocked each day.
- Only if a parent turns on Track websites: the names of sites the phone looked up while a browser was
open (for example
youtube.com), as a count per site per day. Never page addresses, searches, what's on a page, passwords, or time spent, and lookups apps make on their own are ignored. - Only if a parent turns the matching option on: which app was opened first after each unlock, and how many notifications each app sent (counts only).
- Settings a parent chooses: the child's display name, daily and per-app limits, bedtime window, blocked website domains, always-allowed apps, apps left out of the daily limit, the "Dumb phone" choice and its allowed apps, and phone numbers allowed to call during bedtime.
- The day's screen time is the counted figure: time in apps a parent left out of the daily limit is not added to it (that time still appears in the per-app usage).
- An anonymous device identifier created by Firebase Authentication, used to pair the phone with a parent.
On a parent's phone (parent app)
- The parent's email address and a password handled by Firebase Authentication.
- The same per-app time and unlock information for the parent's own phone, only if the parent turns on tracking their own device - and, if the parent also turns on Track websites for themselves, the same site-name counts (this uses the optional website filter on the parent's own phone). The parent's own list of installed apps is only read on the phone to build the limits screen; it is not uploaded.
- An optional "calm notification list" of today's notifications on the parent's phone. It is kept only on that phone and never uploaded (the child's phone has the same optional list). If the parent also turns on "Hide other notifications", other apps' notifications are removed from the notification shade after they're added to that local list; calls, texts, alarms and sign-in codes are left alone.
- The choice to use "Dumb phone" (on or off, the Travel profile, and the list of apps a parent allows) is saved with the person's profile so the parent can change it from any of their devices. It contains app names, not activity.
- A family passcode, stored only as a salted hash.
- Feedback a parent chooses to send (the text, app version and device model).
On any device, for stability
- Crash reports (stack traces, device model, Android version, app version) sent to Firebase the operator's own Firebase project.
- No screen content, keystrokes, passwords, messages, photos, contacts list, or location.
- The Accessibility service only learns which app is in front; it is configured not to read window content.
- Notification content is never uploaded. The optional calm notification list, on a child's phone or a parent's, stays on that phone.
- The website filter checks website names on the device against the parent's blocked list. By default it records and uploads nothing about sites. Only if a parent turns on Track websites does it count the site names a browser looked up (see above) and upload those counts; it never sees or stores page addresses, searches, or page content. Allowed lookups are passed to a public DNS resolver (Cloudflare, 1.1.1.1) as they would be without the filter.
- No advertising, no analytics, no crash reporting, and no selling or sharing of data. A crash leaves a note on the phone itself, which a person can read and send on if they choose - nothing is uploaded automatically.
To Google Firebase (Authentication and Firestore) in a project operated by the service operator named above. Firebase is provided by Google; see Google's privacy policy for how they process it. Data is protected in transit, and access is restricted by security rules to the family that created it. This is a community project and has not had an independent security audit. The family passcode is a deterrent against casual changes, not a security boundary against a determined, technically skilled user with access to the child's phone.
The kid app is used by children, but only after a parent has installed it, granted its permissions, and paired it. The child does not create an account or provide personal details; a parent enters the child's display name. Parents can see the child's usage; children see only a simple calm status indicator unless a parent chooses to show more. We do not knowingly collect information from children outside that parent-controlled setup. If you believe a child's information has been collected without a parent's involvement, contact trumpetmadnesshq@gmail.com and it will be deleted.
Usage is kept per day so the app can show a four-week report. A parent can delete a child profile in the app, which also deletes that child's usage history and installed-apps list. To have all of a family's data removed, email trumpetmadnesshq@gmail.com from the parent's account email and it will be deleted (the account, the child profiles, their daily usage and installed-apps lists). Uninstalling the apps stops all collection on that phone.
- Parents control every optional category and can switch it off at any time.
- Turning off the Accessibility service, the notification access, or the website filter in Android settings stops the matching collection. Uninstalling the kid app stops its reporting of usage and installed apps.
- Unpair a kid phone from the parent's account at any time.
If this policy changes, the new version will be posted at this address with an updated date.